Releasetrain

System Architecture

An open-source pipeline for tracking software releases, security advisories, and community signals. The goal is to continuously poll 20+ vendor feeds, package registries, and developer forums; normalise every event into one of two MongoDB collections (versions or reddit); stamp each document with a structured identifier; and expose the full corpus through a typed REST API and a static browser client. No proprietary transforms, no vendor lock-in.

Each section is collapsed by default. Click any heading to expand.

Platform Overview

Six subsystems, two MongoDB collections, one REST API. Arrows show the primary data and control paths.

graph TB subgraph SOURCES ["External Sources · 20+ feeds"] SRC1["Security Feeds
NVD · CVE · Patch Tuesday · Ubuntu · Debian"] SRC2["Browser Releases
Chrome · Firefox · Safari"] SRC3["Runtimes and Platforms
Node.js · Python · Linux Kernel · Eclipse"] SRC4["Community Signals
Reddit 20+ subreddits · Stack Overflow"] end subgraph BOT ["releasetrain-bot · Python collector fleet"] BOT_V["Version pollers
15+ release scrapers"] BOT_R["Reddit scraper
PRAW"] BOT_ML["ML labeller
isUpdateRelated · positiveScore"] end subgraph STORE ["MongoDB Atlas"] COL_V[("versions")] COL_R[("reddit")] end subgraph SERVER ["releasetrain-server · Node and Express"] RT_V["/api/v/*"] RT_R["/api/reddit/*"] RT_AGG["/api/aggregate/*"] end subgraph CLIENT ["releasetrain-client · Static JS and HTML"] UI_FEED["Feed and Dashboard"] UI_CVE["CVE View"] UI_GRAPH["Component Graph"] UI_OTHER["Docs · Label · Archive views"] end subgraph CHAT ["releasetrain-chat · Streamlit RAG"] CHAT_EMB["Embeddings
text encoder"] CHAT_LLM["LLM Inference
DigitalOcean GenAI"] CHAT_UI["Chat Interface"] end SRC1 & SRC2 & SRC3 --> BOT_V --> COL_V SRC4 --> BOT_R --> BOT_ML --> COL_R COL_V --> RT_V & RT_AGG COL_R --> RT_R RT_V --> UI_FEED & UI_CVE & UI_GRAPH RT_R --> UI_FEED COL_V & COL_R --> CHAT_EMB --> CHAT_LLM --> CHAT_UI classDef ext fill:#eef6ff,stroke:#9fb9d9,color:#1b1f23 classDef bot fill:#fff7ea,stroke:#ead171,color:#1b1f23 classDef db fill:#eefbf0,stroke:#9cd6ae,color:#1b1f23 classDef api fill:#f4f6f8,stroke:#d0d7de,color:#1b1f23 classDef ui fill:#fbfcfe,stroke:#d0d7de,color:#1b1f23 classDef chat fill:#fde7e9,stroke:#f1abb5,color:#1b1f23 class SRC1,SRC2,SRC3,SRC4 ext class BOT_V,BOT_R,BOT_ML bot class COL_V,COL_R db class RT_V,RT_R,RT_AGG api class UI_FEED,UI_CVE,UI_GRAPH,UI_OTHER ui class CHAT_EMB,CHAT_LLM,CHAT_UI chat

Source Coverage: 20+ release and community feeds

Security and vendor feeds write to the versions collection. Community signals write to the reddit collection.

flowchart LR subgraph SEC ["Security · 9 sources"] S1["NVD and CVE"] S2["Microsoft Patch Tuesday"] S3["Ubuntu Security Notices"] S4["Debian Advisories"] S5["Android Security Bulletins"] S6["Apple Security Updates"] S7["VMware Advisories"] S8["Oracle Critical Patches"] S9["Samsung Security"] end subgraph BROWS ["Browsers · 3 sources"] B1["Google Chrome Stable"] B2["Mozilla Firefox"] B3["Safari Release Notes"] end subgraph RUN ["Runtimes · 6 sources"] R1["Node.js"] R2["Python"] R3["Linux Kernel Stable"] R4["Eclipse Foundation"] R5["Android Studio"] R6["Let's Encrypt"] end subgraph COMM ["Community · 5 sources"] C1["Reddit 20+ subreddits"] C2["Stack Overflow Tags"] C3["GitHub Security Advisories"] C4["npm Advisories"] C5["PyPI Feed"] end DB_V[("versions")] DB_R[("reddit")] SEC --> DB_V BROWS --> DB_V RUN --> DB_V COMM --> DB_R classDef db fill:#eefbf0,stroke:#9cd6ae,color:#1b1f23 class DB_V,DB_R db

Data Ingestion and Enrichment Pipeline

Raw signals pass through four stages before landing in MongoDB.

flowchart LR subgraph COLLECT ["Collect"] C1["Poll vendor feeds
and release pages"] C2["Scrape Reddit
via PRAW"] end subgraph NORM ["Normalise"] N1["Deduplicate
by redditId or versionId"] N2["Parse semver
and release channel"] end subgraph ENRICH ["Enrich"] E1["Predict isUpdateRelated"] E2["Predict positiveScore"] E3["Stamp versionId
YYYYMMDD · name · version"] E4["Add search tags
and timestamps"] end subgraph STORE ["Store"] S1[("versions")] S2[("reddit")] end C1 --> N2 --> E3 --> E4 --> S1 C2 --> N1 --> E1 --> E2 --> S2 classDef db fill:#eefbf0,stroke:#9cd6ae,color:#1b1f23 class S1,S2 db

API Topology: REST route groups and MongoDB dependencies

All REST route groups and the MongoDB collection each reads or writes.

graph LR CL(["Client or API consumer"]) subgraph API ["REST API · releasetrain.io"] subgraph VER ["/api/v/* · Versions"] V1["GET search · latest10 · count
fc · fcc · stats/by-month"] V2["POST and PUT versions"] end subgraph RED ["/api/reddit/* · Reddit"] R1["GET reddit · by-subreddit
questions · positive · cve · stats"] R2["POST and PUT reddit"] end subgraph AGG ["/api/aggregate/* · Aggregations"] A1["GET v/typeBreakdown · v/updateTypeCount
v/classificationSummary · v/versionCountByDay"] A2["GET reddit/summary · reddit/count
reddit/bySource · reddit/bySubreddit · reddit/countByDay"] end subgraph SYS ["System"] S1["GET health · meta
test/all · test/endpoints"] end end DB_V[("versions")] DB_R[("reddit")] CL --> VER & RED & AGG & SYS VER --> DB_V AGG --> DB_V RED --> DB_R classDef db fill:#eefbf0,stroke:#9cd6ae,color:#1b1f23 class DB_V,DB_R db

Frontend Views: releasetrain-client

All views served as static HTML and JS from a single Nginx or http-server process. Click a view to expand details.

Feed and Dashboard

Real-time release feed with version cards, component filters, CVE badges and channel breakdown charts. Consumes /api/v/search and /api/reddit. Built with jQuery and Chart.js.

CVE View

CVE post timeline with NVD pipeline banner showing post distribution across CVE lifecycle stages (Reserved, Awaiting Analysis, Analyzed, Published). Filters by source, date range and CVE ID pattern.

Component Graph

Interactive network graph rendered with Sigma.js. Nodes are software components; edges represent co-release or dependency relationships. Data served from /src/data/graph.json.

Architecture View

PlantUML diagram viewer rendered client-side via plantuml-decoder.min.js and the bundled WASM core. Displays system architecture diagrams defined in PlantUML DSL without any server round-trip.

Docs and API Explorer

Full API reference with collapsible Swagger-style endpoint cards, curl copy buttons and live test links. System architecture rendered via Mermaid v10 (this section).

Reddit View

Browsable interface over the reddit collection. Filters by subreddit, date, update-related label and predicted positive score. Consumes /api/reddit and all query sub-routes.

Label View

Human-in-the-loop labelling interface for the isUpdateRelated classifier. Displays one Reddit post at a time and writes the label back via PUT /api/reddit/:id.

EDI40-2023 View

Tracks EDI 4.0 2023 specification adoption and version history across LAMP, MEAN, MERN, MEVN and WAMP stacks.

JUSPN View

Japanese specification release tracking with a stack-by-stack version matrix matching the EDI40-2023 use-case structure.

MLTL View

Multi-language temporal logic module tracking version timelines and release cadences across programming language ecosystems.

Changelog

Semantic version history of releasetrain-client following the semver convention.

AI Chat: RAG pipeline with vector search and LLM inference

A Streamlit application (releasetrain-chat) that wraps a retrieval-augmented generation pipeline over both MongoDB collections. At startup it encodes release notes and community posts into a FAISS vector index. At query time it retrieves the top-k most similar documents by cosine similarity, optionally reranked by a cross-encoder, then injects them into an LLM prompt served via DigitalOcean GenAI (Llama 3 or Mistral). Responses include source citations derived from the retrieved documents.

flowchart TD USER(["User question"]) subgraph RAG ["RAG Pipeline · releasetrain-chat · Streamlit"] Q["Query encoder
sentence-transformers"] RET["Vector retriever
top k similarity search"] RANK["Reranker
cross encoder scoring"] AUG["Prompt augmenter
release context injection"] LLM["LLM Inference
DigitalOcean GenAI Platform
Llama 3 · Mistral"] end subgraph CORPUS ["Knowledge Corpus"] DB_V[("versions")] DB_R[("reddit")] IDX[("FAISS vector index")] end USER --> Q --> RET DB_V & DB_R --> IDX IDX --> RET --> RANK --> AUG --> LLM --> ANS(["Grounded answer
with source citations"]) classDef db fill:#eefbf0,stroke:#9cd6ae,color:#1b1f23 classDef chat fill:#fde7e9,stroke:#f1abb5,color:#1b1f23 class DB_V,DB_R,IDX db class Q,RET,RANK,AUG,LLM chat

Embedding model

sentence-transformers all-MiniLM-L6-v2 or OpenAI text-embedding-3-small. Encodes release notes and Reddit posts into dense 384 or 1536 dimensional vectors indexed in FAISS.

LLM

Served via DigitalOcean GenAI Platform. Llama 3 70B or Mistral 7B receives an augmented prompt containing retrieved release context and returns a grounded, cited answer.

Vector store

FAISS in memory index rebuilt at startup from both collections. Top k cosine similarity retrieval with configurable k (default 10 documents per query).

Retrieval strategy

Hybrid: dense vector search over embeddings plus sparse BM25 keyword match over version IDs and CVE strings. Results merged and reranked before prompt injection.

Request Lifecycle: Version search call path

Canonical read path through the stack for a version search call.

sequenceDiagram autonumber actor User participant Client as releasetrain-client participant API as Express REST API participant DB as MongoDB Atlas User->>Client: Search for a component Client->>API: GET /api/v/search with q and limit params API->>API: Validate params and build filter API->>DB: versions.find().sort().skip().limit() DB-->>API: version documents API->>DB: versions.countDocuments() DB-->>API: totalCount API-->>Client: 200 OK with data and totalCount Client-->>User: Rendered results Note over API,DB: Scoped to rolling 2 year window
unless start or end param overrides

↑ Back to top

Health & meta

Endpoints collapsed by default, ordered method-first then route.

GET/api/health

Lightweight health check. No database query.

curl "https://releasetrain.io/api/health"

{ "ok": true, "service": "releasetrain", "serverTime": "2026-03-25T17:00:00.000Z" }

GET/api/meta

Diagnostics route that pings the database and reports collection names.

curl "https://releasetrain.io/api/meta"

{ "ok": true, "dbName": "releasetrain", "ping": { "ok": 1 }, "collections": { "versions": "versions", "users": "users" } }

↑ Back to top

Reddit endpoints

Reddit at a glance

Ingestion, listing, subreddit filtering, update-related search, CVE text search, positive-score retrieval, monthly summaries, and single-item fetch/update. Some routes use page/limit paging; others also support cursor-based navigation.

Endpoints collapsed by default, ordered method-first then route.

GET/api/iot

Specialized Reddit view for IoT-style subreddits, with optional update-related filtering.

limitpageupdateRelated=true

curl "https://releasetrain.io/api/iot?limit=100&page=1"

GET/api/reddit

List Reddit docs, newest first. Supports page/limit, cursor paging, monthly filtering, and update-related filtering.

limitpagecursormonth=YYYYMMshowCount=true

curl "https://releasetrain.io/api/reddit?limit=25&page=1&showCount=true"

{ "data": [ { "title": "...", "created_utc": "..." } ], "totalCount": 25 }

GET/api/reddit/:redditId

Fetch a single Reddit item by Mongo ObjectId or Reddit short id.

curl "https://releasetrain.io/api/reddit/1nq0h33"

GET/api/reddit/by-subreddit

Fetch by one or more subreddits, case-insensitive. Optional score, comment, pagination, and projection filters.

q or subredditminScoreminCommentsfieldspagelimit

curl "https://releasetrain.io/api/reddit/by-subreddit?q=programming,technology&minScore=50&limit=25"

GET/api/reddit/count

Total post count over the rolling two-year window.

curl "https://releasetrain.io/api/reddit/count"

{ "totalRedditPosts": 248 }

GET/api/reddit/meta/subreddits

Return all unique subreddits from the Reddit collection.

curl "https://releasetrain.io/api/reddit/meta/subreddits"

{ "success": true, "count": 14, "data": ["programming", "technology"] }

GET/api/reddit/query/cve

Text-search Reddit content for CVE-like strings.

qcommentsOnly=truefieldsshowCount=truelimit/page/cursor

curl "https://releasetrain.io/api/reddit/query/cve?q=CVE-&limit=25"

GET/api/reddit/query/filter

Filter Reddit docs by comment count and predicted positive score window.

minCommentsminScoremaxScorelimit

curl "https://releasetrain.io/api/reddit/query/filter?minComments=5&minScore=0.6&maxScore=0.95&limit=50"

GET/api/reddit/query/positive

Returns all Reddit docs where metadata.predicted.positiveScore > 0.5, sorted by score descending.

curl "https://releasetrain.io/api/reddit/query/positive"

{ "total": 83, "minScore": 0.5, "data": [ ... ] }

GET/api/reddit/query/questions

Return Reddit docs where metadata.predicted.isUpdateRelated is true and a question marker appears in title or author description.

where=title|description|eitherrequireTitleQuestionfieldsshowCountlimitpage

curl "https://releasetrain.io/api/reddit/query/questions?where=either&limit=25&page=1&showCount=true"

GET/api/reddit/query/update-related

Filter Reddit documents by the nested update-related fields under metadata.labeled and metadata.predicted.

isLabeled=true|falseisUpdateRelated=true|falselimitpage

curl "https://releasetrain.io/api/reddit/query/update-related?isLabeled=true&isUpdateRelated=true&limit=25&page=1"

GET/api/reddit/stats/by-month

Monthly counts for labeled training distribution.

startMonth=YYYYMMendMonth=YYYYMM

curl "https://releasetrain.io/api/reddit/stats/by-month?startMonth=202401&endMonth=202412"

GET/api/reddit/stats/summary

Range summary over Reddit data: total docs, risky docs, latest-update mentions, and CVE mentions.

start=YYYYMMDDend=YYYYMMDD

curl "https://releasetrain.io/api/reddit/stats/summary?start=20240101&end=20241231"

GET/api/subreddits/smoke

Simple footprint check to list distinct subreddits found in the Reddit collection.

curl "https://releasetrain.io/api/subreddits/smoke"

{ "count": 14, "items": ["programming", "technology"] }

POST/api/reddit

Insert or upsert a Reddit document by redditId.

curl -X POST "https://releasetrain.io/api/reddit" -H "Content-Type: application/json" -d '{"redditId":"1nq0h33","title":"Example","subreddit":"programming"}'

PUT/api/reddit

Replace a Reddit document while preserving the existing Mongo _id.

curl -X PUT "https://releasetrain.io/api/reddit" -H "Content-Type: application/json" -d '{"redditId":"1nq0h33","title":"Updated"}'

PUT/api/reddit/:redditId

Update a single Reddit item by ObjectId or redditId.

curl -X PUT "https://releasetrain.io/api/reddit/1nq0h33" -H "Content-Type: application/json" -d '{"title":"Retitled","score":88}'

↑ Back to top

Version endpoints

Versions at a glance

Two flavors: older convenience routes like /api/v/ and the newer /api/v/search. For steady client integration, /api/v/search is the safer path: its filters and paging model are explicit.

Endpoints collapsed by default, ordered method-first then route.

GET/api/dashboard/mltl-risk

Dashboard aggregate for documents marked as MLTL risk. Optional component filter.

q optional

curl "https://releasetrain.io/api/dashboard/mltl-risk?q=chrome,firefox"

GET/api/v/

Older convenience route: returns recent versions. Without q, a broad recent slice; with q, divides the limit across components.

q optional

curl "https://releasetrain.io/api/v/?q=chrome,firefox"

{ "versions": [ ... ] }

GET/api/v/:id

Fetch one version by Mongo ObjectId.

curl "https://releasetrain.io/api/v/660c38fce3cba9423e4f8f23"

GET/api/v/aggregate/byDate

Count how many versions were released on a specific day.

date=YYYYMMDD

curl "https://releasetrain.io/api/v/aggregate/byDate?date=20250723"

{ "success": true, "date": "20250723", "count": 42 }

GET/api/v/count

Total version count inside the rolling two-year window.

curl "https://releasetrain.io/api/v/count"

{ "totalVersions": 54210 }

GET/api/v/d/versionsByComponent

Return latest/current/CVE snapshots for one or more components.

component=name:chrome,version:118

curl "https://releasetrain.io/api/v/d/versionsByComponent?component=name:chrome,version:118"

[ { "name": "chrome", "latestVersion": { ... }, "currentVersion": { ... }, "latestCveVersion": { ... } } ]

GET/api/v/fc

Forecast the next release date for a single component.

q required

curl "https://releasetrain.io/api/v/fc?q=chrome"

[ { "component": "chrome", "releaseDate": "2026-04-07", "version": "135.0.0" } ]

GET/api/v/fcc

Forecast coinciding release dates for multiple components.

q required

curl "https://releasetrain.io/api/v/fcc?q=chrome,firefox"

GET/api/v/latest10

Latest N versions per requested component.

q requiredlimit max 100

curl "https://releasetrain.io/api/v/latest10?q=chrome,firefox&limit=10"

GET/api/v/search

Unified read-only search with filters, projections, count, and cursor paging.

qchannelisCvestart/endfieldsshowCount

curl "https://releasetrain.io/api/v/search?q=chrome,firefox&limit=50&page=1&showCount=true"

curl "https://releasetrain.io/api/v/search?q=chrome&channel=patch&isCve=true&fields=versionId,versionNumber&limit=25"

{ "data": [ { "_id": "...", "versionId": "20250217chrome1.2.3" } ], "totalCount": 314 }

GET/api/v/stats/by-month

Monthly counts grouped by month and release channel, optionally filtered to selected components.

startMonthendMonthq

curl "https://releasetrain.io/api/v/stats/by-month?startMonth=202401&endMonth=202412&q=chrome,firefox"

GET/api/v/versionId/:versionId

Fetch one version by business identifier rather than Mongo ObjectId.

curl "https://releasetrain.io/api/v/versionId/20250217chrome1.2.3"

POST/api/v

Create a version document. The server normalizes versionNumber, infers the release channel, and fills timestamps/search tags.

curl -X POST "https://releasetrain.io/api/v" -H "Content-Type: application/json" -d '{"versionProductName":"chrome","versionNumber":"124.0.1","versionReleaseDate":"20260325","versionReleaseChannel":"patch"}'

PUT/api/v/:id

Update an existing version by Mongo ObjectId.

curl -X PUT "https://releasetrain.io/api/v/660c38fce3cba9423e4f8f23" -H "Content-Type: application/json" -d '{"classification":{"componentType":["browser"]}}'

PUT/api/v/versionId/:versionId

Update an existing version by business identifier. Refreshes versionTimestampLastUpdate.

curl -X PUT "https://releasetrain.io/api/v/versionId/20250217chrome1.2.3" -H "Content-Type: application/json" -d '{"newFieldName":"newValue"}'

↑ Back to top

Component endpoints

Endpoints collapsed by default, ordered method-first then route.

GET/api/c/count

Total number of distinct components in the rolling two-year window.

curl "https://releasetrain.io/api/c/count"

{ "totalComponents": 1440 }

GET/api/c/frequency

Builds a component list from top components and those updated today.

curl "https://releasetrain.io/api/c/frequency"

{ "totalComponents": 20, "components": ["chrome", "firefox"] }

GET/api/c/name/:componentName/:versionNumber?

Fetch version history for a specific component, optionally narrowed to one exact version number.

curl "https://releasetrain.io/api/c/name/firefox"

curl "https://releasetrain.io/api/c/name/firefox/118.0.1"

GET/api/c/names

Return distinct component names in the rolling two-year window.

curl "https://releasetrain.io/api/c/names"

GET/api/c/os

Returns distinct component names classified as OS in the rolling two-year window.

curl "https://releasetrain.io/api/c/os"

GET/api/component/

Search component records. Matches product name or predicted component type.

q optionalpageNumParam

curl "https://releasetrain.io/api/component/?q=linux"

↑ Back to top

Aggregation endpoints

Endpoints collapsed by default, ordered method-first then route.

Measure volume, gaps, and classification counts across both collections. All date params use YYYYMMDD format. Range-based endpoints default to the rolling 2-year window when start/end are omitted.

Versions · `/api/aggregate/v/*`

GET/api/aggregate/v/typeBreakdown

CVE vs release-note split plus per-channel breakdown for a date range. Omit start/end to use the rolling 2-year window.

start optionalend optional

curl "https://releasetrain.io/api/aggregate/v/typeBreakdown?start=20250101&end=20251231"

{
  "range": { "start": "20250101", "end": "20251231" },
  "total": 4821,
  "cveCount": 1203,
  "nonCveCount": 3618,
  "byChannel": { "major": 312, "minor": 1540, "patch": 1766, "cve": 1203, "other": 0 }
}

GET/api/aggregate/v/classificationSummary

Summarize security and breaking classification tags for one day.

timestamp=YYYYMMDD required

curl "https://releasetrain.io/api/aggregate/v/classificationSummary?timestamp=20250723"

{ "timestamp": "20250723", "total": 14, "classification": { "security-fix": 8, "breaking-change": 6 } }

GET/api/aggregate/v/componentTypeCount

Count classified component types for a single day.

timestamp=YYYYMMDD required

curl "https://releasetrain.io/api/aggregate/v/componentTypeCount?timestamp=20250730"

{ "timestamp": "20250730", "total": 40, "components": { "browser": 8, "os": 6 } }

GET/api/aggregate/v/missingFields

Sample documents where a requested field is missing, null, or empty. Useful for data quality audits.

field requiredlimit optional

curl "https://releasetrain.io/api/aggregate/v/missingFields?field=versionNumber&limit=50"

GET/api/aggregate/v/oldestTimestamp

Find the release date of the Nth newest document and compute its age in days.

count optional

curl "https://releasetrain.io/api/aggregate/v/oldestTimestamp?count=1000"

{ "oldest": "20250723", "deltaInDays": 245 }

GET/api/aggregate/v/sourceCountByType

Count one source type for a given day. sourceType: cve, major, minor, patch.

sourceType requiredtimestamp=YYYYMMDD required

curl "https://releasetrain.io/api/aggregate/v/sourceCountByType?sourceType=cve&timestamp=20250723"

{ "timestamp": "20250723", "sourceType": "cve", "count": 18 }

GET/api/aggregate/v/updateTypeCount

Count major, minor, patch, and other versions for a single day.

timestamp=YYYYMMDD required

curl "https://releasetrain.io/api/aggregate/v/updateTypeCount?timestamp=20250723"

{ "timestamp": "20250723", "major": 2, "minor": 5, "patch": 17, "other": 1 }

GET/api/aggregate/v/versionCountByDay

Day-by-day version counts over an explicit date range.

start=YYYYMMDD requiredend=YYYYMMDD required

curl "https://releasetrain.io/api/aggregate/v/versionCountByDay?start=20250701&end=20250730"

{ "range": { "start": "20250701", "end": "20250730" }, "days": [{ "_id": "20250701", "count": 12 }] }

Community · `/api/aggregate/reddit/*`

GET/api/aggregate/reddit/summary

Full overview in one call: totals, Reddit vs Stack Overflow split, top subreddits/components, and score stats. Omit start/end for the rolling 2-year window.

start optionalend optionaltopN optional · default 10

curl "https://releasetrain.io/api/aggregate/reddit/summary?topN=5"

{
  "range": { "start": "20240518", "end": "20260518" },
  "total": 28340,
  "bySource": { "reddit": 21050, "stackoverflow": 7290 },
  "topSubreddits": [{ "_id": "android", "count": 4120 }, { "_id": "chrome", "count": 2980 }],
  "score": { "avg": 14.3, "max": 4821, "totalWithPositiveScore": 19204 }
}

GET/api/aggregate/reddit/count

Total post count plus Reddit vs Stack Overflow split for a date range.

start optionalend optional

curl "https://releasetrain.io/api/aggregate/reddit/count?start=20250101&end=20251231"

{ "range": { "start": "20250101", "end": "20251231" }, "total": 14820, "redditCount": 11340, "stackoverflowCount": 3480 }

GET/api/aggregate/reddit/bySource

Counts grouped by source field. Documents without a source field are counted as reddit.

start optionalend optional

curl "https://releasetrain.io/api/aggregate/reddit/bySource"

{ "range": { "start": "20240518", "end": "20260518" }, "total": 28340, "sources": { "reddit": 21050, "stackoverflow": 7290 } }

GET/api/aggregate/reddit/bySubreddit

Top subreddits or Stack Overflow components by post count, with average score. Filter by source to compare communities.

start optionalend optionallimit optional · default 20 · max 100source optional · reddit | stackoverflow

curl "https://releasetrain.io/api/aggregate/reddit/bySubreddit?limit=5&source=reddit"

{
  "range": { "start": "20240518", "end": "20260518" },
  "source": "reddit", "limit": 5,
  "subreddits": [{ "_id": "android", "count": 4120, "avgScore": 18.4 }]
}

GET/api/aggregate/reddit/countByDay

Post count per day. Same shape as /api/aggregate/v/versionCountByDay. Filter by source to compare Reddit vs Stack Overflow ingestion cadence.

start=YYYYMMDD requiredend=YYYYMMDD requiredsource optional · reddit | stackoverflow

curl "https://releasetrain.io/api/aggregate/reddit/countByDay?start=20250701&end=20250730&source=stackoverflow"

{ "range": { "start": "20250701", "end": "20250730" }, "source": "stackoverflow", "days": [{ "_id": "20250701", "count": 8 }] }

↑ Back to top

Test & discovery endpoints

Endpoints collapsed by default, ordered method-first then route.

GET/api/test/all

Runs a built-in suite of GET requests against selected routes and returns status plus payload samples.

curl "https://releasetrain.io/api/test/all"

{ "totalGET": 11, "results": [ { "method": "GET", "path": "/api/v?q=chrome,firefox", "status": 200, "success": true } ] }

GET/api/test/endpoints

Enumerates all registered routes and flags duplicates.

curl "https://releasetrain.io/api/test/endpoints"

{ "totalEndpoints": 30, "endpoints": [ { "methods": ["GET"], "path": "/api/health" } ] }

GET/api/test/endpoints/html

HTML view of discovered GET endpoints with generated example URLs and sample outputs.

curl "https://releasetrain.io/api/test/endpoints/html"

↑ Back to top

⚡ Quick Start

Three requests that cover the most common use cases. Paste any into a terminal to verify connectivity and explore the response shape. Base URL: https://releasetrain.io · All GET endpoints are public and unauthenticated.

What released in the last 7 days?

curl "https://releasetrain.io/api/v/search?start=20260511&end=20260518&limit=25&showCount=true"

Any CVEs published this month?

curl "https://releasetrain.io/api/v/search?channel=cve&start=20260501&end=20260531&limit=50&showCount=true"

What is Reddit saying about Chrome right now?

curl "https://releasetrain.io/api/reddit/by-subreddit?q=chrome&minScore=5&limit=25"

Latest 10 Firefox releases with key fields only

curl "https://releasetrain.io/api/v/latest10?q=firefox&limit=10"

Forecast Chrome's next release date

curl "https://releasetrain.io/api/v/fc?q=chrome"

↑ Back to top

📋 Data Models

Two MongoDB collections store all release intelligence. Not every document has every field — the schema evolves as new sources are added.

versions collection

One document per software version release. Written by the bot fleet; read by /api/v/* and /api/aggregate/*.

Field	Type	Description
`_id`	ObjectId	MongoDB document ID
`versionId`	string	Composite key: `YYYYMMDD + productName + versionNumber`. Unique per release.
`versionProductName`	string	Normalised product name, lowercase. e.g. `chrome`, `firefox`
`versionNumber`	string	Semver string. e.g. `124.0.1`
`versionReleaseDate`	string	Release date as `YYYYMMDD`
`versionReleaseChannel`	string	Inferred: `major` · `minor` · `patch` · `cve` · `other`
`versionTimestamp`	number	Unix milliseconds derived from `versionReleaseDate`
`versionTimestampLastUpdate`	string	ISO-8601 datetime of last write
`isCve`	boolean	`true` when channel is `cve`
`classification.componentType`	string[]	e.g. `["browser"]`, `["os"]`, `["runtime"]`
`classification.securityType`	string[]	e.g. `["security-fix"]`
`classification.breakingType`	string[]	e.g. `["breaking-change"]`
`metadata.predicted.isUpdateRelated`	boolean	ML prediction: is this an update-related version?
`metadata.predicted.positiveScore`	number	Sentiment score 0–1. Above 0.5 is positive.
`metadata.labeled.isUpdateRelated`	boolean\|null	Human override. `null` = unlabeled.

{
  "_id": "660c38fce3cba9423e4f8f23",
  "versionId": "20250217chrome124.0.1",
  "versionProductName": "chrome",
  "versionNumber": "124.0.1",
  "versionReleaseDate": "20250217",
  "versionReleaseChannel": "patch",
  "versionTimestamp": 1739750400000,
  "versionTimestampLastUpdate": "2025-02-17T10:00:00.000Z",
  "isCve": false,
  "classification": { "componentType": ["browser"] },
  "metadata": {
    "predicted": { "isUpdateRelated": true, "positiveScore": 0.72 },
    "labeled":   { "isUpdateRelated": null }
  }
}

reddit collection

One document per Reddit post. Written by the scraper and ML labeller; read by /api/reddit/*.

Field	Type	Description
`_id`	ObjectId	MongoDB document ID
`redditId`	string	Reddit short ID, e.g. `1nq0h33`. Deduplication key.
`title`	string	Post title
`subreddit`	string	Subreddit name without prefix, e.g. `programming`
`author_description`	string	Post body / selftext
`score`	number	Reddit upvote score at ingestion time
`num_comments`	number	Comment count at ingestion time
`created_utc`	string	ISO-8601 datetime of original Reddit post
`updatedAt`	string	ISO-8601 datetime of last upsert
`comments`	object[]	Top-level comment objects from the thread
`metadata.predicted.isUpdateRelated`	boolean	ML prediction: does this post discuss a software update?
`metadata.predicted.positiveScore`	number	Sentiment score 0–1
`metadata.labeled.isUpdateRelated`	boolean\|null	Human label. `null` = unlabeled.

{
  "_id": "69d176bbda0850f83829b2d6",
  "redditId": "1nq0h33",
  "title": "Chrome 124 breaks extension manifest v2",
  "subreddit": "chrome",
  "author_description": "After updating to 124.0.1 my uBlock Origin stopped...",
  "score": 342,
  "num_comments": 87,
  "created_utc": "2025-02-18T09:14:00.000Z",
  "updatedAt": "2025-02-18T12:00:00.000Z",
  "metadata": {
    "predicted": { "isUpdateRelated": true, "positiveScore": 0.21 },
    "labeled":   { "isUpdateRelated": true }
  }
}

↑ Back to top

📄 Pagination Guide

The API supports two paging schemes. Use page/limit for random access; use cursor for efficient forward scrolling through large result sets without offset drift.

Page / Limit

Param	Description
`page`	1-based page number. Default: `1`
`limit`	Documents per page. Default: `25`. Pass `limit=all` to disable paging (large collections only).
`showCount=true`	Adds `totalCount` to the response body at the cost of an extra `countDocuments` call.

curl "https://releasetrain.io/api/v/search?q=chrome&limit=50&page=2&showCount=true"
# response: { "data": [...], "totalCount": 314 }

Cursor (forward-only)

Param	Description
`cursor`	Opaque token from the `X-Next-Cursor` response header. Omit for the first page.

# First page — capture the X-Next-Cursor response header
curl -i "https://releasetrain.io/api/v/search?q=chrome&limit=50"

# Subsequent page
curl "https://releasetrain.io/api/v/search?q=chrome&limit=50&cursor=TOKEN"

Support by endpoint

Endpoint	Page/Limit	Cursor
`/api/v/search`	✓	✓
`/api/v/latest10`	✓	✗
`/api/reddit`	✓	✓
`/api/reddit/by-subreddit`	✓	✗
`/api/reddit/query/cve`	✓	✓
`/api/reddit/query/questions`	✓	✗
`/api/reddit/query/update-related`	✓	✗
`/api/iot`	✓	✗

↑ Back to top

🤖 ML Fields

Two predicted fields are added to every Reddit document by the bot ML labeller. Human overrides live alongside predictions so consumers can choose which branch to trust.

`metadata.predicted.isUpdateRelated`

Text classifier trained on labeled Reddit posts. Predicts whether a post discusses a software update — a new release, patch announcement, upgrade discussion, or CVE advisory.

Value	Meaning
`true`	Post likely discusses a software update or release event
`false`	Post predicted as not update-related
field absent	Document has not been scored yet

Query predicted positives: /api/reddit/query/update-related?isLabeled=false&isUpdateRelated=true. Switch to isLabeled=true to use human labels.

`metadata.predicted.positiveScore`

Sentiment classifier output. Continuous score 0–1 reflecting community sentiment toward the update being discussed. Scores above 0.5 are considered positive.

Range	Interpretation
`0.0 – 0.5`	Neutral to negative sentiment
`0.5 – 0.75`	Mildly positive
`0.75 – 1.0`	Strongly positive

Retrieve high-confidence positives: /api/reddit/query/positive. Use /api/reddit/query/filter?minScore=0.75&maxScore=1.0 for a custom window.

Human labels vs predictions

Human labels live under metadata.labeled.isUpdateRelated and take precedence over predictions for training and evaluation. The Label view in releasetrain-client is the labelling interface. Pass isLabeled=true on any query route to read only human-verified data.

↑ Back to top

📖 Glossary

Domain-specific terms used throughout the API, codebase and this documentation.

Term	Definition
`versionId`	Composite business key: `YYYYMMDD + productName + versionNumber`. Unique per release. Used by `/api/v/versionId/:id`.
`versionReleaseChannel`	Inferred semver category: `major` (breaking), `minor` (feature), `patch` (bugfix), `cve` (security advisory), `other` (non-standard).
`isCve`	Set to `true` when a version document originates from a CVE or NVD advisory rather than a regular release channel.
`isUpdateRelated`	Boolean: does a Reddit post discuss a software update? Stored under `metadata.predicted` (ML) and `metadata.labeled` (human).
`positiveScore`	ML-predicted sentiment score 0–1. Reflects community tone toward the update discussed in a Reddit post.
`rolling 2-year window`	Most read routes restrict results to the past two years by default. Override with `?start=YYYYMMDD&end=YYYYMMDD`.
`redditId`	Reddit's own short alphanumeric post ID, e.g. `1nq0h33`. Used as the deduplication key on ingestion.
`cursor`	Opaque pagination token from the `X-Next-Cursor` response header. Pass on the next request to continue without offset drift.
`componentType`	Classification tag assigned during enrichment: `browser`, `os`, `runtime`, `package`, `tool`.
`MLTL`	Multi-Language Temporal Logic. A spec-tracking module for cross-language version timeline analysis.
`JUSPN`	Japanese specification release tracking module. Mirrors the EDI40-2023 stack matrix for Japanese standard editions.
`EDI40-2023`	EDI 4.0 2023 specification adoption tracker covering LAMP, MEAN, MERN, MEVN and WAMP stack version matrices.

↑ Back to top

⚠ Error Format

All error responses return JSON. Use the HTTP status code for programmatic branching; the message field is human-readable context.

Status	When	Body shape
`200 OK`	Success	`{ "data": [...] }` or collection-specific shape
`400 Bad Request`	Missing or invalid parameter	`{ "error": "Bad Request", "message": "..." }`
`404 Not Found`	Document ID does not exist	`{ "error": "Not Found", "message": "document not found" }`
`500 Server Error`	Unhandled exception or DB error	`{ "error": "Internal Server Error", "message": "..." }`

// 400 example
{ "error": "Bad Request", "message": "field param is required" }

// 404 example
{ "error": "Not Found", "message": "document not found" }

The /api/health and /api/meta routes use a slightly different shape: { "ok": true } on success and { "ok": false, "error": "..." } on failure.

↑ Back to top

🔍 Field Projection

Several endpoints accept a fields query parameter that limits the fields returned per document — useful for reducing payload size when building lightweight dashboards or mobile clients.

# Return only title, subreddit and score
curl "https://releasetrain.io/api/reddit?limit=50&fields=title,subreddit,score"

# Return only key version fields
curl "https://releasetrain.io/api/v/search?q=chrome&fields=versionId,versionNumber,versionReleaseDate"

# Nested fields via dot notation
curl "https://releasetrain.io/api/reddit?fields=title,metadata.predicted.isUpdateRelated"

Endpoint	Notes
`/api/v/search`	All version fields including nested paths
`/api/reddit`	All reddit fields including nested paths
`/api/reddit/query/cve`	All reddit fields
`/api/reddit/query/questions`	All reddit fields
`/api/reddit/query/update-related`	All reddit fields
`/api/reddit/by-subreddit`	All reddit fields

_id is always returned regardless of the fields value. Nested paths use dot notation, e.g. metadata.predicted.positiveScore.

↑ Back to top

🔒 Security and Access

Current access model for the REST API.

Concern	Status
Authentication	None required for `GET` endpoints. The full read surface is public.
Write access	`POST` and `PUT` routes are intended for the bot fleet and are not token-guarded in the current version — treat them as internal.
CORS	Permissive. All origins are allowed for `GET` requests. Safe to call from browser JavaScript.
Rate limiting	No hard limit is enforced. For long-running integrations, cache responses locally and use `cursor` or `start/end` to request only new data.
HTTPS	All production traffic is served over HTTPS. HTTP redirects to HTTPS.
Data sensitivity	All data is derived from public sources (Reddit, public vendor advisories, NVD). No PII is stored.

↑ Back to top

📊 Live Collection Stats

Fetched live from the API on first load. Rolling 2-year window. Est. size based on average document size.

📦 Versions

Total	…
CVE advisories	…
Release notes	…
Est. size	…

💬 Community

Total	…
Reddit posts	…
Stack Overflow	…
Est. size	…

Loading freshness info…

↑ Back to top

📝 Changelog

Notable changes to releasetrain-client, newest first.

2026-05-22

v3.21.1

Strip trailing commas from search queries

fix Query normalization: trailing and leading commas are stripped before tracking a search, displaying top searches in the sidebar, and showing queries in the admin search events table.

v3.21.0

Component search tracking, admin search activity view

feat Search tracking: every component search is recorded server-side with query, timestamp, IP, and user agent. Logged-in users are identified by userId; unauthenticated searches are recorded as anonymous.
feat Admin search activity: the Account view for admin users now includes a Component searches table showing all recorded searches across all users, including anonymous, sorted newest first.
feat Top searches sidebar: the home feed sidebar shows the top 3 searched components in the last 24 hours as clickable links, open by default. Sourced from a new public aggregate endpoint.

2026-05-21

v3.20.1

Release view fixes, URL cleanup, view param consistency

fix Release view: vendor-only: removed source filter dropdown; view always shows the current account's own published releases. Source filter no longer allowed switching to third-party extracted data.
fix Experience reports embedded: reports are now stored as an array on the version document and rendered inline on load. Removed separate knowledge_reports collection and the extra fetch per card.
fix Vendor releases visible in home feed: two filters were hiding vendor-published releases. Server-side: end=today (local date) excluded documents stamped with tomorrow's UTC date; vendor docs now bypass the date cap. Client-side: versionTime() maps a release date to noon UTC, which is ahead of local Date.now() for negative-offset timezones; vendor docs now bypass the future-date guard.
fix View URL params consistent with nav labels: ?view=network renamed to ?view=release to match the 🌐 Release nav label. Added missing ?view=account routing entry so the Account view is reachable via URL.
ux No %2C in URL: multi-component search queries now display literal commas in the address bar. Trailing commas typed in the search field are stripped before writing to the URL.
feat Subreddit search: searching a subreddit name with no matching versioned component now shows a community posts group. Posts from matching subreddits are surfaced even when no version data exists for that name.

2026-05-21

v3.20.0

Release Knowledge Network view

feat Network view: new 🌐 Network nav entry. Authenticated vendors can publish releases under a unique namespace. Namespaces are validated against existing tracked vendor names. Other users can report production outcomes per release (worked well, had issues, upgraded from version).
feat Discover tab: lists published releases with collapsible experience reports. Reports show outcome, from-version, description, date, and reporter.
feat Publish tab: form with vendor namespace, component name, version, channel, optional release notes URL and description. Namespace is validated client-side before submission.
ux Unauthenticated users see a gate screen explaining the feature with a direct sign-in prompt.

2026-05-21

v3.19.0

Risk Report: multi-component, search integration, score legend

feat Renamed Dashboard to Risk Report: nav link and title updated to reflect the feature's purpose.
feat Multi-component risk analysis: the risk report now reads components directly from the feed search field. Multiple comma-separated components are supported and scored together.
feat Score legend: the sidebar shows risk level thresholds (Low, Medium, High, Critical) and the scoring factors used to compute the score.
fix Removed redundant Component input from the Risk Report sidebar; the feed search field is now the single source of truth for component selection.

2026-05-21

v3.18.1

Org namespaces in share links, bookmarks, topbar login indicator

feat Organization namespaces: users can add up to 2 org slugs to their profile. Each slug is embedded in every bookmark share link as ?org=name&share=… so recipients can identify the source organization. Slugs are validated as 1 to 32 alphanumeric, dash, or underscore characters.
feat Bookmarks: signed-in users can save named searches via the 🔖 button in the feed sidebar. Each bookmark stores a URL and generates a public share link. Opening a share link restores the saved search automatically.
feat Topbar login chip: a small badge showing the logged-in user name or email appears in the topbar at all times when a session is active. Clicking it opens the Account view.
feat Bookmark list in Account view: the profile panel lists all saved bookmarks with Open, Copy link, and Delete actions. Refresh button reloads the list from the API.
feat Why create an account section: collapsible panel in the sign-in view lists the technical advantages of having an account including org namespaces, server-side bookmark storage, cross-device persistence, share links, JWT session, and admin role access.
fix Org namespaces moved server-side: org names are now snapshotted onto the bookmark document at creation time and returned by the share endpoint. Share URLs are clean (?share=abc123 only). Recipients see a "Shared by: orgname" banner for 4 seconds when opening a share link. Org chips are shown on each bookmark row in the Account view.
feat Bookmark rename: an Edit button on each bookmark row opens an inline text input. Submitting saves the new name via PUT /api/bookmarks/:id and refreshes the list. Keyboard shortcuts Enter and Escape confirm and cancel the edit.
feat Chart.js graph view: the Graph view now renders four Chart.js charts: release activity over time (line), top components by release count (horizontal bar), channel breakdown (donut), and CVE releases per week (bar). Sigma.js network graph removed. Time window and data source are selectable from the sidebar.
feat vis-network graph view: the Graph view now renders a force-directed node and edge network. Each searched component becomes a hub node. Version nodes, CVE release nodes (diamond), Reddit posts, CVE-mention posts, high-risk posts, and StackOverflow posts are positioned as satellites. Edge length encodes date delta: nodes from today are close to the hub; older nodes are farther. Multiple searched components produce multiple hub nodes. Layer visibility, time window, and risk filters are controlled from the sidebar.

2026-05-19

v3.16.0

Live Collection Stats in home sidebar, mobile feed scroll, 7-day data window

feat Live Collection Stats panel added to the default feed sidebar: shows total versions, CVE advisories, release notes, and community post counts fetched from the API on page load.
feat Today count and yesterday delta in brackets for both Versions and Community totals: format is 54,210 [42 today, +12%]. Delta % is green when higher than yesterday, red when lower. Fetched from /api/v/aggregate/byDate and /api/aggregate/reddit/count.
ux Home sidebar stats also pre-populate the Docs sidebar Live Collection Stats so values appear immediately when switching to the Docs view.
fix Feed panel scrollable on mobile: max-height: 70vh; overflow-y: auto on #feedPanel at max-width: 640px so the version feed scrolls independently rather than expanding the full page height.
feat Data window changed from 6 months to 7 days: Api.versions sends start as 7 days ago; client-side version and community post filters apply the same 7-day cutoff. Feed header updated to reflect the new window.
fix Feed sort and Range KPI now use versionReleaseDate instead of versionTimestampLastUpdate. Since bots set versionTimestamp to Date.now() on every upsert, the old sort collapsed all items to today. Range now reflects actual release date spread across the 7-day window.
fix Removed start param from Api.versions(): previously sending start = 7 days ago restricted the server to only documents with versionReleaseDate in the last 7 days. Server now uses its 2-year rolling window and returns the 150 most recently released versions; the 7-day client filter then trims the result. end=today is still sent to suppress future-dated documents.
fix versionTime() now strips dashes before testing the 8-digit pattern, accepting both YYYYMMDD and YYYY-MM-DD release date formats.
fix Community bracket now always shown when API data is available, even when today count is zero. Previously the bracket was suppressed if rTodayN === 0, hiding the delta from endpoints that count by created_utc rather than ingestion date.
fix Range KPI updates as infinite scroll loads new pages: extracted range calculation into updateRangeKpi(items) helper, called from both applyFilters() and the scroll page-fetch callback after new groups are merged into STATE.groupsFiltered.
fix Full 7-day window now loads automatically: appendNextGroups always continues via requestAnimationFrame after each batch, so once all local groups are rendered it falls through to the cursor-fetch branch and loads subsequent server pages without requiring a scroll.
feat Relative time labels for recent feed items: items from the last 2 hours now display "X min ago" (under 60 min), "1 hr ago" or "2 hr ago" (under 2 hr) instead of "Today". Older items keep the existing "Today" / "Yesterday" / date labels. isNew is now based on a midnight timestamp comparison rather than string matching.
feat Activity chart added to home sidebar: compact 7-day per-day line chart showing versions and community post counts computed from loaded state. Renders using Chart.js, loaded lazily on first use.
fix Community bracket today count now accurate: bracket is computed from STATE.redditAll using redditTime() after the post index loads, replacing the unreliable /api/aggregate/reddit/count per-day endpoint which counted by created_utc rather than ingestion date.
fix CVE feed items now open NIST NVD: the open link on CVE entries resolves to versionUrl (the NVD advisory URL stored on the document) instead of the internal API endpoint. Falls back to the API URL when versionUrl is absent.
fix Activity chart data sourced from range aggregate endpoints: loadHomeStats now calls /api/aggregate/v/versionCountByDay and /api/aggregate/reddit/countByDay with a single 7-day window each (2 requests total), replacing 14 individual per-day calls. Results are mapped from sparse { _id, count } arrays to the fixed 7-day label sequence before passing to updateActivityChart.
fix Community line in activity chart now renders correctly: /api/aggregate/reddit/countByDay was filtering created_utc with YYYYMMDD strings, which matched nothing because the field stores Unix epoch seconds (int/double/string) or ISO date strings. Endpoint rewritten to normalize created_utc to a UTC Date via a $switch pipeline stage, then filter and group on the normalized value. Client also patches the community dataset from STATE.redditAll after reddit loads, as a fallback for the current deployment.
feat CVE line added to activity chart: chart now shows three lines: Versions (indigo), CVE (red), Community (green). CVE per-day counts sourced from new /api/aggregate/v/cveCountByDay endpoint, which filters isCve: true and groups by versionReleaseDate. Falls back to counting v.isCve from STATE.rawVersions when API data is unavailable.
fix Mobile scroll restored for all views: dashboard had no mobile CSS rule and was unscrollable with overflow: hidden and a two-column pane layout. All views now scroll on mobile: dashboard panes stack vertically and the page scrolls naturally; docs and ack views drop their fixed height so page scroll applies; CVE view sets a min-height and adds touch-action: pan-y to the inner scroll list; changelog clears its overflow clip; -webkit-overflow-scrolling: touch added to all inner-scroll containers for iOS compatibility.

2026-05-18

v3.15.0

Reddit integration in feed cards, timeline sort fixes & docs rewrite

feat Reddit and Stack Overflow posts now appear inside each component feed card, interleaved chronologically with version entries using a two-pointer merge.
feat 🟧 SO toggle added to the left sidebar: counts Stack Overflow posts matched to the active component set.
fix created_utc stored as Unix epoch seconds was being parsed as milliseconds (→ 1970). Now multiplied by 1000 before passing to Date().
fix versionTimestamp is set to Date.now() on every bot upsert, making all versions appear as "today". Timeline now uses versionReleaseDate (YYYYMMDD) as the sort key instead.
fix Reddit posts were appended as a block after all versions. Replaced .sort() with a proper two-pointer merge of two pre-sorted arrays to guarantee chronological interleaving.
fix Left sidebar toggle counts (💬 Reddit, ⚠️ SO Risk, etc.) stayed at 0 after reddit loaded. paintFixedCounts now fires inside ensureRedditLoaded() once the index is built.
fix positiveScore > 0.5 filter was too strict — many posts have no ML score. Feed now fetches from /api/reddit?limit=400 (all recent posts by date) instead of the positive-score endpoint.
ux Partial subreddit matching: "android" matches "androiddev", "chrome" matches "googlechrome", etc.
ux Reddit items in the feed card show an orange left border and an r/subreddit chip; Stack Overflow items show amber.
docs Docs view rewritten: marketing language removed, section headings use : instead of ·, AI chat section now describes the RAG pipeline technically (FAISS index, cosine similarity, cross-encoder reranking, LLM prompt injection).
fix Default feed no longer shows future-dated documents: server request now sends end=today and the client-side filter rejects any version with versionReleaseDate > now.
fix Mobile scroll broken: html, body { overflow: hidden } was trapping all content on narrow viewports where the feed panel loses its own scroll container. Override to overflow: auto; height: auto at max-width: 640px.
feat New bot nodejs.py: polls nodejs.org/dist/index.json, derives release channel from semver and security flag, maps LTS codename, and posts to /api/v. Lookback window configurable via LOOKBACK_DAYS.

2026-05-17

v3.14.0

Dashboard graphs, phone layout & changelog

feat Hub-and-spoke dependency map on dashboard right pane: visualises component→versions, CVE versions, Reddit posts, and Reddit+CVE edges on a DPR-aware canvas.
feat Ecosystem snapshot graph on aggregate left pane: auto-selects the most diversely-connected component from the live dataset.
feat Release cadence bar chart (releases/week) and Reddit mention trend line chart added to the component pane.
fix Reddit mention trend was always empty: day-key format mismatch (YYYYMMDD vs YYYY-MM-DD) corrected.
ux Dashboard right pane now scrolls independently; left pane and page remain locked.
ux Changelog view added (this page) with semver-labelled entries.
ux Graph view on phones: Sigma canvas reduced to 60 vh; sidebar controls collapse to a fixed bottom-sheet overlay.
perf touch-action: none on graph canvas prevents iOS scroll hijack during pinch-zoom.
perf prefers-reduced-motion media query disables all animations for users who opt out.
ux Added meta theme-color and color-scheme for better browser chrome theming.

2026-05-10

v3.13.3

Dashboard two-pane layout

feat Two-pane dashboard: Total Aggregate (left, always global) and Component (right, filtered).
feat Sample chips in empty right pane for quick component selection.
feat Page scroll locked while dashboard is active; restored on exit.
fix Removed duplicate "Add component" input from dashboard sidebar.
ux Main search always syncs to dashboard on activate.

2026-04-28

v3.13.2

Dashboard KPIs & timeline

feat KPI strip: Today count, Last 2 yrs, CVE today, Signals today: all with delta badges.
feat Release & signal timeline line chart with configurable window (7 / 30 / 90 days).
feat Update-type bar chart (major / minor / patch / CVE) with yesterday comparison.

2026-03-15

v3.13.0

📈 Dashboard view introduced

feat New Dashboard nav entry with sidebar controls (timeline window, date picker).
feat Aggregate version counts fetched from /api/v/aggregate endpoints.
feat Community signals section: Reddit and StackOverflow post counts.

2026-01-20

v3.12.0

CVE timeline view

feat Dedicated CVE view with filterable timeline and CVSS severity chips.
feat Reddit / SO risk-signal overlay on CVE cards.
ux Responsive CVE cards collapse gracefully on narrow viewports.

2025-11-04

v3.11.0

Graph view: Sigma.js

feat Component dependency graph powered by Sigma.js with cost-based node colouring.
feat Layer toggles (versions, Reddit/SO posts, CVE posts, CVE versions).
feat Ring-overlay canvas for component groupings.
ux Node info panel on click with links to API endpoints.

› Why create an account?

🔖Save named searches and restore them across devices via server-side bookmark storage.
🔗Generate public share links for any component search so collaborators can open the exact same view.
🔐JWT-based session persists across tabs and survives page reloads without re-authenticating.
🛡Admin role grants access to user management: view all accounts, change roles, remove users.
📌Bookmark list is user-specific: each account holds its own saved searches, isolated from other users.
🏷Add up to 2 org namespaces to your profile. They are embedded in every share link you generate as ?org=name&share=… so recipients know the source.

📋 Recent Updates (last 7 days)

Idle

🔍

No updates match the current filters.

Loading more…

System Architecture

Health & meta

Reddit endpoints

Reddit at a glance

Version endpoints

Versions at a glance

Component endpoints

Aggregation endpoints

Versions · `/api/aggregate/v/*`

Community · `/api/aggregate/reddit/*`

Test & discovery endpoints

What released in the last 7 days?

Any CVEs published this month?

What is Reddit saying about Chrome right now?

Latest 10 Firefox releases with key fields only

Forecast Chrome's next release date

`metadata.predicted.isUpdateRelated`

`metadata.predicted.positiveScore`

Human labels vs predictions

CVE Post Timeline

📝 Changelog

Strip trailing commas from search queries

Component search tracking, admin search activity view

Release view fixes, URL cleanup, view param consistency

Release Knowledge Network view

Risk Report: multi-component, search integration, score legend

Org namespaces in share links, bookmarks, topbar login indicator

Live Collection Stats in home sidebar, mobile feed scroll, 7-day data window

Reddit integration in feed cards, timeline sort fixes & docs rewrite

Dashboard graphs, phone layout & changelog

Dashboard two-pane layout

Dashboard KPIs & timeline

📈 Dashboard view introduced

CVE timeline view

Graph view: Sigma.js

🤝 Credits & Acknowledgements

Create account

📋 Recent Updates (last 7 days)

System Architecture

Health & meta

Reddit endpoints

Reddit at a glance

Version endpoints

Versions at a glance

Component endpoints

Aggregation endpoints

Versions · /api/aggregate/v/*

Community · /api/aggregate/reddit/*

Test & discovery endpoints

What released in the last 7 days?

Any CVEs published this month?

What is Reddit saying about Chrome right now?

Latest 10 Firefox releases with key fields only

Forecast Chrome's next release date

Page / Limit

Cursor (forward-only)

Support by endpoint

metadata.predicted.isUpdateRelated

metadata.predicted.positiveScore

Human labels vs predictions

CVE Post Timeline

📝 Changelog

Strip trailing commas from search queries

Component search tracking, admin search activity view

Release view fixes, URL cleanup, view param consistency

Release Knowledge Network view

Risk Report: multi-component, search integration, score legend

Org namespaces in share links, bookmarks, topbar login indicator

Live Collection Stats in home sidebar, mobile feed scroll, 7-day data window

Reddit integration in feed cards, timeline sort fixes & docs rewrite

Dashboard graphs, phone layout & changelog

Dashboard two-pane layout

Dashboard KPIs & timeline

📈 Dashboard view introduced

CVE timeline view

Graph view: Sigma.js

🤝 Credits & Acknowledgements

Sign in

Create account

Versions · `/api/aggregate/v/*`

Community · `/api/aggregate/reddit/*`

`metadata.predicted.isUpdateRelated`

`metadata.predicted.positiveScore`